Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-09 · source-backed
The Apache-2.0 scanner (14,403 stars) shipped v2.8.1 on August 7 and v2.8.2 on August 8, covering Claude Code, Codex CLI, and Gemini CLI across 68 vulnerability patterns in 17 categories, with live OSV.dev CVE lookups and SARIF output (GitHub). The actionable ratio: skills bundling executable scripts are 2.12x more likely to be vulnerable. Risk concentrates in the script payload, not the SKILL.md prose. If you're only reviewing the markdown before installing a skill, you're reviewing the wrong file.
Each link below shares sources, entities, or timing with this story.
The antigravity-awesome-skills repository hit 36,145 GitHub stars with a catalog of 1,400+ installable SKILL.md playbooks that work across Claude Code, Cursor, Codex CLI, Gemini CLI, Kiro, OpenCode, and GitHub Copilot. One command: npx antigravity-awesome-skills --claude. That...
Three things happened this month that only make sense together. Agent Plugins 1.0 shipped co-signed by six competitors: AWS, Anysphere, Microsoft, OpenAI, Vercel and Google (GitHub Changelog). It makes skills-plus-MCP bundles portable across clients. OpenAI's August 11 Codex c...
A single SKILL.md file now runs identically across Claude Code, Cursor, Gemini CLI, Codex CLI, and Antigravity IDE. Anthropic's frontend-design skill (277K+ installs) demonstrates the pattern. Invest in one well-crafted SKILL.md, get consistent output everywhere. Source
Six clients. One manifest. Zero vendor lock. Vercel published Agent Plugins 1.0.0 on August 6, an openly licensed spec that bundles Agent Skills and MCP servers behind a single portable manifest. The shape is deliberately boring: a plugin.json requiring only schemaVersion and...
A spec is a press release until someone who didn't write it implements it. GitHub made Agent Plugins 1.0 generally available on August 12 across VS Code, Copilot CLI, the Copilot SDK, and the Copilot app on all plans. The spec, published August 6, was co-authored by AWS, Anysp...
pbakaus/impeccable (+471 today, 3,000 forks, 1,174 commits, Apache 2.0) installs into Cursor, Claude Code, Copilot, Gemini CLI, Codex CLI, Grok Build, OpenCode, Pi, Kiro, Trae, Rovo Dev, Qoder, and Mistral Vibe via npx impeccable install (GitHub). It combines PRODUCT.md/DESIGN...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.